Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Exposing Hidden Server Secrets: A Practical Guide to Samba Reconnaissance
════════════════════════
𐀪 Author: Geerhan Sentanu, CH, CHt. | Offensive Security
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 22:51:29 GMT
════════════════════════
⌗ Tags: #ethical_hacking #offensive_security #cybersecurity #cyber_security_awareness #hacking_tools
Medium
Exposing Hidden Server Secrets: A Practical Guide to Samba Reconnaissance
If you are diving into network security, ethical hacking, or system administration, you will inevitably run into Samba. It is the backbone…
15 views
Daily Writeups
⤷ Title: Practical Web Pentest Associate: TCM Security Notes
════════════════════════
𐀪 Author: The Husky Hacker
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 22:10:21 GMT
════════════════════════
⌗ Tags: #pwpa #tcm_security #ethical_hacking
Medium
Practical Web Pentest Associate: TCM Security Notes
Ain’t no rest for the wicked! I passed the PWPA the other day!!
27 views
Daily Writeups
⤷ Title: TryHackMe Walkthrough: Windows Fundamentals Part 3
════════════════════════
𐀪 Author: Shubham Khirwadkar
════════════════════════
ⴵ Time: Fri, 01 May 2026 01:01:32 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #security #windows #tryhackme
Medium
TryHackMe Walkthrough: Windows Fundamentals Part 3
A hands-on walkthrough of the Windows Fundamentals Part 3 room on TryHackMe.
26 views
Daily Writeups
⤷ Title: CMSpit Tryhackme walkthrough
════════════════════════
𐀪 Author: Crystalcascade14
════════════════════════
ⴵ Time: Thu, 30 Apr 2026 23:37:59 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #exiftool #tryhackme #tryhackme_writeup #cybersecurity
Medium
CMSpit Tryhackme walkthrough
Semi-guided challenge medium level (privesc required) difficulty.
30 views
Daily Writeups
⤷ Title: Minirat’s Stealth Supply Chain Attack Targets macOS Developers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 01 May 2026 01:59:57 +0000
════════════════════════
⌗ Tags: #Malware #@velora_dex/sdk #2026 #cybersecurity #developer security #go #infosec #macOS #Malware Analysis #Minirat #npm #Remote Access Trojan #supply chain attack
Daily CyberSecurity
Minirat’s Stealth Supply Chain Attack Targets macOS Developers
Minirat, a Go-based macOS RAT, exploits npm supply chains to bypass security. It features VM detection, AES encryption, and persistence. Secure your dev tools.
28 views
Daily Writeups
⤷ Title: Single Actor Bypassed Open VSX Security with “Disposable” Tools
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 01 May 2026 01:01:13 +0000
════════════════════════
⌗ Tags: #Cybercriminals #2026 #Cyber Attribution #infosec #Malicious Extensions #malware #Open VSX #String_Fragment Reconstruction #supply chain attack #VS Code Extensions #Yeeth Security
Daily CyberSecurity
Single Actor Bypassed Open VSX Security with "Disposable" Tools
Yeeth Security uncovers a sophisticated Open VSX campaign using string-fragment reconstruction to hide malware. 16 malicious extensions identified.
20 views
Daily Writeups
⤷ Title: Cockpit | Proving Grounds | OSCP Preparation
════════════════════════
𐀪 Author: SilentExploit
════════════════════════
ⴵ Time: Fri, 01 May 2026 02:09:58 GMT
════════════════════════
⌗ Tags: #tech #hacking #bug_bounty #ctf #technology
Medium
Cockpit | Proving Grounds | OSCP Preparation
Hello friends. Welcome to my latest article detailing how I obtained the root flag on this machine.
13 views
Daily Writeups
⤷ Title: How I Investigated a Real Phishing Attack That Led to Malware Execution and C2 Communication
════════════════════════
𐀪 Author: Ahmdirfanmp
════════════════════════
ⴵ Time: Fri, 01 May 2026 02:45:48 GMT
════════════════════════
⌗ Tags: #incident_response #soc #cybersecurity #phishing #ethical_hacking
Medium
How I Investigated a Real Phishing Attack That Led to Malware Execution and C2 Communication
As a SOC Analyst , I recently investigated a phishing case on the LetsDefend platform that turned out to be far more serious than a simple…
25 views
Daily Writeups
⤷ Title: ️ SQL Injection 是什麼？
════════════════════════
𐀪 Author: 思維舞步 MindSteps
════════════════════════
ⴵ Time: Fri, 01 May 2026 02:52:27 GMT
════════════════════════
⌗ Tags: #sql_injection #system_architect #information_technology #database #information_security
Medium
🛡️ SQL Injection 是什麼？
你在網站上輸入帳號密碼，期待順利登入。可是，如果有人在這個輸入框裡輸入的不是密碼，而是一段惡意的程式碼呢？這段程式碼可能直接打開資料庫的大門，讓攻擊者竊取或篡改所有資料。這就是 SQL Injection（SQL 注入攻擊）的危險所在。
29 views
Daily Writeups
⤷ Title: The Secret Language of Search: Google Dorking
════════════════════════
𐀪 Author: sablimino
════════════════════════
ⴵ Time: Fri, 01 May 2026 04:37:19 GMT
════════════════════════
⌗ Tags: #google #cybersecurity #hacking #bug_bounty #ethical_hacking
Medium
The Secret Language of Search: Google Dorking
Imagine you are standing in the world’s largest library. It has billions of books, but there’s a problem: there are no signs, and the books…
25 views
Daily Writeups
⤷ Title: Polymorphic & Metamorphic Malware: The Shape-Shifting Threat Your Antivirus Can’t See
════════════════════════
𐀪 Author: Paritosh
════════════════════════
ⴵ Time: Fri, 01 May 2026 04:32:44 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #malware #bug_bounty #cybersecurity #hacking
Medium
Polymorphic & Metamorphic Malware: The Shape-Shifting Threat Your Antivirus Can’t See
A deep dive into how modern malware evolves, evades, and why the old playbook of signature detection is quietly losing the war.
29 views
Daily Writeups
⤷ Title: City Council ️ | Hack Smarter Labs Walkthrough
════════════════════════
𐀪 Author: WireHawk Security
════════════════════════
ⴵ Time: Fri, 01 May 2026 04:16:32 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #information_security #hacking #infosec
Medium
City Council 🏛️ | Hack Smarter Labs Walkthrough
Walkthrough for "City Council" on Hack Smarter Labs
38 views
Daily Writeups
⤷ Title: Copy Fail (CVE-2026–31431): How a 2017 Performance Optimization Became a Nine-Year Root Exploit on…
════════════════════════
𐀪 Author: Frank Mccausland
════════════════════════
ⴵ Time: Fri, 01 May 2026 03:54:21 GMT
════════════════════════
⌗ Tags: #cybersecurity #cve #hacking
Medium
Copy Fail (CVE-2026–31431): How a 2017 Performance Optimization Became a Nine-Year Root Exploit on Every Major Linux Distribution
A logic bug in the Linux kernel’s crypto subsystem gave any local user a deterministic, traceless path to root. It was there since 2017. An…
50 views
Daily Writeups
⤷ Title: The 11-Step Trap: How a Fake DHL OTP Trick Steals Your Password
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 01 May 2026 06:08:35 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Credential Harvesting #cybersecurity #DHL Phishing #EmailJS #Forcepoint X_Labs #OTP Fraud #Phishing Lures #social engineering
Daily CyberSecurity
The 11-Step Trap: How a Fake DHL OTP Trick Steals Your Password
Forcepoint X-Labs uncovers a clever 11-step DHL phishing scam using a fake OTP interface to build trust and steal passwords. See how the trick works.
39 views
Daily Writeups
⤷ Title: Cisco Ethical Hacker Notes — part 10
════════════════════════
𐀪 Author: ExploitHunter
════════════════════════
ⴵ Time: Fri, 01 May 2026 05:46:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #cyber_security_awareness #web_development #ethical_hacking #infosec
Medium
Cisco Ethical Hacker Notes — part 10
Module 9: Reporting and Communication
30 views
Daily Writeups
⤷ Title: Cisco Ethical Hacker Notes — part 9
════════════════════════
𐀪 Author: ExploitHunter
════════════════════════
ⴵ Time: Fri, 01 May 2026 05:11:00 GMT
════════════════════════
⌗ Tags: #infosec #cybersecurity #cyber_security_awareness #web_development #ethical_hacking
Medium
Cisco Ethical Hacker Notes — part 9
Module 8:Performing Post-Exploitation Techniques
19 views
Daily Writeups
⤷ Title: Why Enumeration Is More Important Than Exploitation in Pentesting
════════════════════════
𐀪 Author: Amisha phuyal
════════════════════════
ⴵ Time: Fri, 01 May 2026 06:28:51 GMT
════════════════════════
⌗ Tags: #information_security #ethical_hacking #penetration_testing #cybersecurity
Medium
Why Enumeration Is More Important Than Exploitation in Pentesting
Many beginners focus on exploits professionals focus on information.
24 views
Daily Writeups
⤷ Title: VulnNet: Internal TryHackMe Writeup — Exploiting Misconfigurations for Full System Compromise
════════════════════════
𐀪 Author: Indu Shekhar Pandey
════════════════════════
ⴵ Time: Fri, 01 May 2026 06:11:05 GMT
════════════════════════
⌗ Tags: #vulnnet_internal #penetration_testing #tryhackme #vulnerability_assessment #cybersecurity
Medium
VulnNet: Internal TryHackMe Writeup — Exploiting Misconfigurations for Full System Compromise
Overview
36 views
Daily Writeups
⤷ Title: CyberSecurity Foundation
════════════════════════
𐀪 Author: mHamzaFaqir
════════════════════════
ⴵ Time: Fri, 01 May 2026 06:05:58 GMT
════════════════════════
⌗ Tags: #offensive_security #cybersecurity #security_operation_center #ethical_hacking #soc
Medium
CyberSecurity Foundation
I start learning Cybersecurity in 3 Months from scratch
30 views
Daily Writeups
⤷ Title: SERVER-SIDE REQUEST FORGERY (SSRF) in crAPI
════════════════════════
𐀪 Author: Krutika
════════════════════════
ⴵ Time: Fri, 01 May 2026 05:49:29 GMT
════════════════════════
⌗ Tags: #ssrf_attack #owasp_api_security_top_10 #ssrf #ssrf_vulnerability #crapi
Medium
SERVER-SIDE REQUEST FORGERY (SSRF) in crAPI
One of the dangerous vulnerabilities in API security is Server-Side Request Forgery (SSRF). It is categorized as API7: Server Side Request…
42 views
Daily Writeups
⤷ Title: Best Diagram Software in 2026, Why EdrawMax Works for Everyday Use
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Fri, 01 May 2026 07:03:29 +0000
════════════════════════
⌗ Tags: #Software Reviews
Hackread
Best Diagram Software in 2026, Why EdrawMax Works for Everyday Use
Compare top diagram software in 2026 and see why Wondershare EdrawMax can be a practical choice for fast, template rich, AI supported diagramming.
37 views